NGINX on another host

DobriyDed

Need a word of advice
I’ve 2 hosts

First one is gateway to private network. Here lives NGINX (without NPM), as reverse proxy for all services inside
Second one is host in private network (behind the 1-st host). Here docker containers resides

Is it possible to setup Mailcow in this configuration?
Can someone share nginx config and .env for container
Main problem is 2-nd host cannot access file system of 1-st, where all certificates located

esackbauer

DobriyDed Is it possible to setup Mailcow in this configuration?

Sure. You can use the default config, and just point nginx config to the private IP of mailcow (instead of 127.0.0.1):
https://docs.mailcow.email/post_installation/reverse-proxy/r_p-nginx/
You dont need to change the ports, you can use 80 and 443 for the mailcow host.

DobriyDed Main problem is 2-nd host cannot access file system of 1-st, where all certificates located

Ansible or a shell script copying the certificates can solve this. Here is the location to copy them:
https://docs.mailcow.email/post_installation/firststeps-ssl/#how-to-use-your-own-certificate
Make sure that you include all needed names in the certificates and have the full chain (also autodiscover and autoconfig).

Remember that for all other connections like SMTP and IMAP you need a NAT rule pointing for those ports to mailcow.

DobriyDed

esackbauer You are real hero! Thank for your help !

I wish there was a simpler way to do this, like making NGINX node 1 “transparent” and handling all certificates in the acme-mailcow container on docker host ( node #2)

esackbauer

You decided to have a reverse proxy 😉
Easier it would be to put mailcow directly to the internet on a public IP or use NAT. This is how it was created for. It has own firewall rules in iptables and Netfilter/Fail2ban blocking.